Data protection information for applicants in accordance with Art. 13 and 14 of the General Data Protection Regulation (DSGVO)

V2.0

We, Fischer Profil GmbH (hereinafter also "Fischer Profil", "we" or "us"), take the protection of personal data and its confidential treatment very seriously. We therefore hereby inform you about the processing of your personal data as part of the online application process with us and the rights to which you are entitled.

1. Name and contact details of the responsible person

Fischer Profil GmbH
Waldstraße 67
57250 Netphen-Deuz

Phone: (+49) 02737 – 5080
E-mail address: mailto:info@fischerprofil.de

2. Contact details of the data protection officer

Mr. Florian Reichert
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
53113 Bonn
Germany

Phone: (+49) 0228-227 226 0
https://www.scheja-partner.de/kontakt/kontakt.html
www.scheja-partner.de

3. Legal bases, purposes and duration of data processing

In the following, we inform you about the legal basis and purposes of data processing in connection with your application procedure.

3.1 Data processing for the purpose of the application procedure
We process your personal data for the decision on the establishment of an employment relationship.

In doing so, we only process the personal data from you that is related to your application and that is required to determine your professional and personal skills in relation to the vacant position. This application data can be in detail:

• Contact information, including your name, email address and phone number
• Data on your career, education and qualifications
• Data on any further training measures and additional qualifications

Special categories of personal data within your application data may include:

• Religious affiliation
• Severely disabled status

You essentially determine the scope of the personal data yourself by submitting your application documents.

We may add the following data to your application data during the application process:

• Notes on the course of the application process
• Job-related information made publicly available, e.g. profile details in professional social media networks
• Personal data about you that we collect from third parties (see section 6)

The data processing is based on Art. 6 para. 1 b) DSGVO in conjunction with. § 26 para. 1 p. 1, para. 8 p. 2 BDSG.

We process special categories of personal data on the basis of Section 26 (3) sentence 1 BDSG.

You are not obliged to provide us with personal data. However, the provision of certain personal data is necessary for the application process and for the decision on the conclusion of an employment contract. If you do not provide us with all the personal data required for the application process when you apply, we will not be able to consider you in the application process.

If an employment relationship is established between you and us, we do not completely delete the data from your application process, but add it to your personnel file to the extent necessary. We will then process this data for the purpose of implementing the employment relationship. We will then inform you about this in more detail in a separate form.

If no employment relationship is established with us and you have not consented to further storage of your application data and no longer storage is required due to a legal obligation, we will store the above-mentioned personal data for 6 months after completion of the application process.

3.2 Consent
We process your personal data on the basis of a declaration of consent provided by you, insofar as you have given us such a declaration for specific purposes. You can also find the purpose pursued with the processing in the text of the respective declaration of consent.

This concerns the following cases:

• Your application did not lead to employment with us. However, you have allowed us to include your application data in our applicant/talent pool for future job postings.

The data processing is based on Art. 6 para. 1 a) DSGVO in conjunction with. § Section 26 (2) BDSG. If we also process special categories of personal data based on your consent, the data processing is based on Art. 9 para. 2 a) DSGVO in conjunction with. § 26 para. 2, 3 BDSG.

You have the right to revoke your consent at any time. We will then no longer process your personal data on the basis of the consent. However, the revocation does not affect the lawfulness of such processing that was already carried out on the basis of consent before the revocation. They therefore remain lawful even after the revocation.

We delete the data after revocation of consent or after 24 months after consent has been given.

3.3 Preservation of legitimate interests
We process your personal data to protect our legitimate interests and/or the legitimate interests of third parties if we consider that your interests or fundamental rights and freedoms do not outweigh our interests. 3.3 Preservation of legitimate interests

This concerns the following cases:

• assertion, exercise or defense of legal claims arising from the application process. Our legitimate interest in processing your application data then lies, for example, in the obligation to provide evidence in legal proceedings.

The data processing is based on Art. 6 para. 1 f) DSGVO.

If we process special categories of personal data within the meaning of Art. 9 (1) DSGVO for the assertion, exercise or defense of legal claims, this is done on the basis of Art. 9 (2) f) DSGVO.

If no employment relationship is established with us and you have not consented to further storage of your application data and no longer storage is required due to a legal obligation, we will store the above-mentioned personal data for 6 months after completion of the application process.

4. Cookies

Auf unserem Bewerberportal werden Cookies eingesetzt. Cookies sind kleine Dateien, die von einer Website auf Ihrem Gerät gespeichert werden können.

Die Rechtsgrundlage für den Zugriff auf Ihr Endgerät, der zur Durchführung des elektronischen Kommunikationsvorgangs oder zur Bereitstellung bestimmter, von Ihnen gewünschten Funktionen erforderlich ist, ist § 25 Abs. 2 Nr. 2 des Gesetzes über den Datenschutz in Telekommunikation und Telemedien (TTDSG). Die Rechtsgrundlage für die Verarbeitung der durch solche Cookies erhobenen personenbezogenen Daten ist unser berechtigtes Interesse an einer ordnungsgemäßen Funktionsweise des Bewerberportals gemäß Art. 6 Abs. 1 f) DSGVO.

Wenn Sie die Einstellungen Ihres Browsers ändern, um Cookies abzulehnen oder zu löschen, finden Sie im Hilfe- und Supportbereich Ihres Browsers eine Anleitung zum Blockieren oder Löschen von Cookies. Bitte beachten Sie, dass die Funktionsfähigkeit und der Funktionsumfang unseres Angebots dadurch eingeschränkt sein können.

Für eine ordnungsgemäße Funktionsweise des Bewerberportals sind folgende Cookies technisch unbedingt notwendig.

5. Empfänger oder Kategorien von Empfängern

Internally, only those departments and the employees working there have access to your personal data who require such access to fulfill the purposes stated in section 3. These are the personnel department and the respective management of the department in which the advertised position is to be filled.
Extern haben folgende Empfänger/Kategorien von Empfängern Zugriff auf Ihre Daten:

• Processors who provide the Applicant Platform and the provision of IT services to us in the form of support or services.
• Public authorities: Authorities and state institutions, such as public prosecutors, courts or tax authorities, to which we may transfer personal data in individual cases if and to the extent that there is a legal basis for doing so in the individual case, in particular an obligation.
• Under certain circumstances, private parties may also have access to your personal data within the framework of data protection requirements. These may include, for example, tax consultants, management consultants, attorneys, contact persons within the Group. In this respect, the confidentiality required by law is guaranteed.

6. Datenverarbeitung in Drittländern

Your personal data will not be transferred to third countries as part of the application process.

7. Quellen personenbezogener Daten bei Dritterhebung

We do not only process personal data that we collect directly from you. In certain cases, we also collect your personal data from third parties. Below you will find an overview of the sources of such third-party collections of your data.

• We receive your application data for the purpose of the application process via an employment agency, personnel service provider or management consultant.
• If you have a publicly viewable profile on relevant job-related social media networks - e.g. StepStone, Monster, LinkedIN, Xing - or disclose your profile to us as part of the application process, we may also collect personal data from you on these for the purpose of the application process. You alone determine the scope and availability of the data.

8. Automatisierte Entscheidungsfindung einschließlich Profiling

We do not use automated decision making including profiling according to Art. 22 DSGVO.

9. Betroffenenrechte

As a person affected by the processing of personal data, you have the following rights:

• request confirmation as to whether we are processing personal data relating to you; if this is the case, you have the right to information on this processing.
• for correction of inaccurate personal data concerning you and completion of incomplete personal data concerning you.
• under the conditions of Art. 17 DSGVO the deletion personal data concerning you, inter alia, if the processing was carried out unlawfully or is no longer necessary.
• under the conditions of Art. 18 DSGVO Restriction of processing personal data concerning you, including in lieu of deletion of the data.
• Sie betreffende personenbezogene Daten, die Sie bereitgestellt haben, in einem strukturierten, gängigen und maschinenlesbaren Format zu erhalten oder an einen anderen Verantwortlichen zu übermitteln, sofern die Verarbeitung mithilfe automatisierter Verfahren erfolgt und auf Ihrer Einwilligung oder einem Vertrag mit Ihnen beruht (Datenübertragbarkeit).
• revoke any consent given to us to process your personal data at any time with effect for the future (revocation of consent). The lawfulness of the processing of your data until revocation remains unaffected.

Right of objection

Right to object on a case-by-case basis:

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) DSGVO (performance of tasks in the public interest or in the exercise of official authority) or Art. 6(1)(f) DSGVO (balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

You can contact us at any time to assert your data subject rights. To do so, please use the contact details of the data controller mentioned above under point 1.

If you believe that the processing of your personal data violates data protection law, you can also file a Complaint to a supervisory authority in particular in the EU member state or federal state of your habitual residence, place of work or the place of the alleged infringement complained of by you.
This also includes the supervisory authority responsible for us:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf
Phone: (+49) 0211 38424-0
Fax: 0211 38424-999
E-mail address: poststelle@ldi.nrw.de

Stand: 18.05.2022